
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier: UiwUmmZD93p6KpaBLoipPk+lFLtQJL+RkMQF8/BIEVE=
Subject key identifier: DE:0F:21:72:3C:E1:71:B7:03:E5:2B:91:3A:37:7A:82:05:3B:7A:00
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial: 0EA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number: 0E9E
Signing time: Tue 04 Nov 2025 17:46:58 +0000
Manifest this update: Tue 04 Nov 2025 17:46:58 +0000
Manifest next update: Tue 11 Nov 2025 17:46:58 +0000
Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: EzBvyGfEf1IMjyF9+lUX7ubuAf5rYBm1rgqr+EZrcmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Validity
Not Before: Nov 4 17:46:58 2025 GMT
Not After : Nov 11 17:46:58 2025 GMT
Subject: CN=690a3c12-6f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:97:7a:86:51:16:a7:80:20:40:61:eb:96:
2d:99:d2:56:4d:a6:21:6e:95:a3:60:5c:82:61:d1:
b1:e8:78:d1:68:db:ab:3d:cc:c2:a5:cd:6a:2c:40:
22:bb:c6:c3:b0:3a:88:b9:73:d5:f0:03:89:8a:25:
a0:17:98:c3:dc:3d:66:82:86:dd:6d:4b:16:33:2b:
96:4d:b4:34:36:04:9c:94:2d:ad:61:30:d2:3c:64:
3f:e3:f5:d1:61:fe:26:04:2b:db:2c:1a:e4:7d:0f:
86:77:7d:55:3d:51:4f:85:f8:09:10:5c:e4:27:ba:
57:8e:48:47:d9:34:40:76:a4:8b:ec:ed:23:a4:ab:
2a:1e:cf:66:20:7e:5d:35:68:53:53:91:9b:31:72:
b1:0a:ee:7a:8b:08:df:3c:92:b0:eb:bb:49:de:ec:
1d:4a:66:e8:78:7d:4f:cd:bb:d2:31:d3:a9:38:fa:
83:e0:52:fd:cb:36:bf:a0:59:c7:e1:f1:0e:1c:b1:
e9:af:50:3a:71:41:00:7a:66:b4:ed:83:7b:83:03:
c9:c9:93:a1:3d:f6:04:80:73:14:ac:fa:e5:26:67:
a3:b5:79:9a:57:31:00:48:91:f8:0d:62:08:0a:7b:
de:17:4b:b1:aa:c7:41:f1:f5:5c:74:4e:0a:ec:27:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:21:72:3C:E1:71:B7:03:E5:2B:91:3A:37:7A:82:05:3B:7A:00
X509v3 Authority Key Identifier:
keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:4e:c5:96:37:3f:ce:db:a3:ea:97:47:27:0f:13:e3:ba:
bd:a8:fc:f3:59:5f:d4:e2:7f:ea:91:cf:44:27:8b:00:e8:c0:
fa:6f:b7:a8:a7:5e:b7:ea:1c:07:a1:fc:ba:23:62:0f:e6:2e:
81:e1:59:77:37:96:67:76:bb:a5:9d:70:4a:4a:7f:b4:af:99:
1c:cb:3f:3b:d7:bc:13:3f:93:d5:d8:de:93:78:60:4b:6e:ec:
14:42:0c:5b:80:e5:1e:da:19:91:32:7a:d1:99:59:66:c8:3f:
4f:5e:11:75:0a:f0:e2:4f:ac:ba:29:39:a6:a6:30:2c:13:80:
4b:82:e3:21:b7:69:54:e4:5f:17:d4:0d:98:a5:cf:6a:61:4b:
9b:e5:e1:7c:97:7f:b7:83:86:af:a2:72:56:cb:ba:93:9a:fb:
4a:75:bd:c8:f6:01:04:21:a4:be:fc:2b:6a:65:cd:c5:64:eb:
dc:e3:b9:92:48:fe:b8:e1:65:74:4b:84:6e:f0:cd:ba:d9:15:
1d:40:89:77:a3:df:7b:bc:5a:85:f3:dc:e9:2b:0c:86:09:fc:
75:5e:ef:0d:1e:cb:91:88:f8:8e:74:e3:60:56:66:9d:2a:97:
64:b3:69:28:88:11:18:18:9f:aa:12:58:07:35:1b:54:5c:49:
68:89:01:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF
QTI3MTYzRUYwHhcNMjUxMTA0MTc0NjU4WhcNMjUxMTExMTc0NjU4WjAYMRYwFAYD
VQQDEw02OTBhM2MxMi02ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5qXeoZRFqeAIEBh65YtmdJWTaYhbpWjYFyCYdGx6HjRaNurPczCpc1qLEAi
u8bDsDqIuXPV8AOJiiWgF5jD3D1mgobdbUsWMyuWTbQ0NgSclC2tYTDSPGQ/4/XR
Yf4mBCvbLBrkfQ+Gd31VPVFPhfgJEFzkJ7pXjkhH2TRAdqSL7O0jpKsqHs9mIH5d
NWhTU5GbMXKxCu56iwjfPJKw67tJ3uwdSmboeH1PzbvSMdOpOPqD4FL9yza/oFnH
4fEOHLHpr1A6cUEAema07YN7gwPJyZOhPfYEgHMUrPrlJmejtXmaVzEASJH4DWII
CnveF0uxqsdB8fVcdE4K7CcqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4PIXI8
4XG3A+UrkTo3eoIFO3oAMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF
QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra
S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIo07Fljc/ztuj6pdHJw8T47q9qPzzWV/U4n/qkc9EJ4sA6MD6b7eo
p1636hwHofy6I2IP5i6B4Vl3N5ZndrulnXBKSn+0r5kcyz8717wTP5PV2N6TeGBL
buwUQgxbgOUe2hmRMnrRmVlmyD9PXhF1CvDiT6y6KTmmpjAsE4BLguMht2lU5F8X
1A2Ypc9qYUub5eF8l3+3g4avonJWy7qTmvtKdb3I9gEEIaS+/CtqZc3FZOvc47mS
SP644WV0S4Ru8M262RUdQIl3o997vFqF89zpKwyGCfx1Xu8NHsuRiPiOdONgVmad
Kpdks2koiBEYGJ+qElgHNRtUXEloiQEK
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:48 2025 by rpki-client